feat: Config to eventstore (#3158)

* feat: add default language to eventstore * feat: add secret generator configs events * feat: tests * feat: secret generators in eventstore * feat: secret generators in eventstore * feat: smtp config in eventstore * feat: smtp config in eventstore * feat: smtp config in eventstore * feat: smtp config in eventstore * feat: smtp config in eventstore * fix: migrations * fix migration version * fix test * feat: change secret generator type to enum * feat: change smtp attribute names * feat: change smtp attribute names * feat: remove engryption algorithms from command side * feat: remove engryption algorithms from command side * feat: smtp config * feat: smtp config * format smtp from header Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2025-08-12 00:07:36 +00:00 · 2022-02-16 16:49:17 +01:00
parent 4272ea6fe1
commit e3528ff0b2
118 changed files with 5216 additions and 686 deletions
--- a/internal/query/projection/iam.go
+++ b/internal/query/projection/iam.go
@@ -40,6 +40,10 @@ func (p *IAMProjection) reducers() []handler.AggregateReducer {
 					Event:  iam.ProjectSetEventType,
 					Reduce: p.reduceIAMProjectSet,
 				},
+				{
+					Event:  iam.DefaultLanguageSetEventType,
+					Reduce: p.reduceDefaultLanguageSet,
+				},
 				{
 					Event:  iam.SetupStartedEventType,
 					Reduce: p.reduceSetupEvent,
@@ -56,13 +60,14 @@ func (p *IAMProjection) reducers() []handler.AggregateReducer {
 type IAMColumn string

 const (
-	IAMColumnID           = "id"
-	IAMColumnChangeDate   = "change_date"
-	IAMColumnGlobalOrgID  = "global_org_id"
-	IAMColumnProjectID    = "iam_project_id"
-	IAMColumnSequence     = "sequence"
-	IAMColumnSetUpStarted = "setup_started"
-	IAMColumnSetUpDone    = "setup_done"
+	IAMColumnID              = "id"
+	IAMColumnChangeDate      = "change_date"
+	IAMColumnGlobalOrgID     = "global_org_id"
+	IAMColumnProjectID       = "iam_project_id"
+	IAMColumnSequence        = "sequence"
+	IAMColumnSetUpStarted    = "setup_started"
+	IAMColumnSetUpDone       = "setup_done"
+	IAMColumnDefaultLanguage = "default_language"
 )

 func (p *IAMProjection) reduceGlobalOrgSet(event eventstore.Event) (*handler.Statement, error) {
@@ -99,6 +104,23 @@ func (p *IAMProjection) reduceIAMProjectSet(event eventstore.Event) (*handler.St
 	), nil
 }

+func (p *IAMProjection) reduceDefaultLanguageSet(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.DefaultLanguageSetEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-3n9le", "seq", event.Sequence(), "expectedType", iam.DefaultLanguageSetEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-30o0e", "reduce.wrong.event.type")
+	}
+	return crdb.NewUpsertStatement(
+		e,
+		[]handler.Column{
+			handler.NewCol(IAMColumnID, e.Aggregate().ID),
+			handler.NewCol(IAMColumnChangeDate, e.CreationDate()),
+			handler.NewCol(IAMColumnSequence, e.Sequence()),
+			handler.NewCol(IAMColumnDefaultLanguage, e.Language.String()),
+		},
+	), nil
+}
+
 func (p *IAMProjection) reduceSetupEvent(event eventstore.Event) (*handler.Statement, error) {
 	e, ok := event.(*iam.SetupStepEvent)
 	if !ok {
--- a/internal/query/projection/iam_test.go
+++ b/internal/query/projection/iam_test.go
@@ -52,7 +52,7 @@ func TestIAMProjection_reduces(t *testing.T) {
 			},
 		},
 		{
-			name: "reduceGlobalOrgSet",
+			name: "reduceProjectIDSet",
 			args: args{
 				event: getEvent(testEvent(
 					repository.EventType(iam.ProjectSetEventType),
@@ -81,6 +81,36 @@ func TestIAMProjection_reduces(t *testing.T) {
 				},
 			},
 		},
+		{
+			name: "reduceDefaultLanguageSet",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.DefaultLanguageSetEventType),
+					iam.AggregateType,
+					[]byte(`{"language": "en"}`),
+				), iam.DefaultLanguageSetMapper),
+			},
+			reduce: (&IAMProjection{}).reduceDefaultLanguageSet,
+			want: wantReduce{
+				projection:       IAMProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "UPSERT INTO zitadel.projections.iam (id, change_date, sequence, default_language) VALUES ($1, $2, $3, $4)",
+							expectedArgs: []interface{}{
+								"agg-id",
+								anyArg{},
+								uint64(15),
+								"en",
+							},
+						},
+					},
+				},
+			},
+		},
 		{
 			name: "reduceSetupStarted",
 			args: args{
--- a/internal/query/projection/projection.go
+++ b/internal/query/projection/projection.go
@@ -69,6 +69,8 @@ func Start(ctx context.Context, sqlClient *sql.DB, es *eventstore.Eventstore, co
 	NewUserMetadataProjection(ctx, applyCustomConfig(projectionConfig, config.Customizations["user_metadata"]))
 	NewUserAuthMethodProjection(ctx, applyCustomConfig(projectionConfig, config.Customizations["user_auth_method"]))
 	NewIAMProjection(ctx, applyCustomConfig(projectionConfig, config.Customizations["iam"]))
+	NewSecretGeneratorProjection(ctx, applyCustomConfig(projectionConfig, config.Customizations["secret_generators"]))
+	NewSMTPConfigProjection(ctx, applyCustomConfig(projectionConfig, config.Customizations["smtp_configs"]))
 	_, err := NewKeyProjection(ctx, applyCustomConfig(projectionConfig, config.Customizations["keys"]), keyConfig, keyChan)

 	return err
--- a/internal/query/projection/secret_generator.go
+++ b/internal/query/projection/secret_generator.go
@@ -0,0 +1,144 @@
+package projection
+
+import (
+	"context"
+
+	"github.com/caos/logging"
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/eventstore"
+	"github.com/caos/zitadel/internal/eventstore/handler"
+	"github.com/caos/zitadel/internal/eventstore/handler/crdb"
+	"github.com/caos/zitadel/internal/repository/iam"
+	"github.com/caos/zitadel/internal/repository/project"
+)
+
+type SecretGeneratorProjection struct {
+	crdb.StatementHandler
+}
+
+const (
+	SecretGeneratorProjectionTable = "zitadel.projections.secret_generators"
+)
+
+func NewSecretGeneratorProjection(ctx context.Context, config crdb.StatementHandlerConfig) *SecretGeneratorProjection {
+	p := &SecretGeneratorProjection{}
+	config.ProjectionName = SecretGeneratorProjectionTable
+	config.Reducers = p.reducers()
+	p.StatementHandler = crdb.NewStatementHandler(ctx, config)
+	return p
+}
+
+func (p *SecretGeneratorProjection) reducers() []handler.AggregateReducer {
+	return []handler.AggregateReducer{
+		{
+			Aggregate: project.AggregateType,
+			EventRedusers: []handler.EventReducer{
+				{
+					Event:  iam.SecretGeneratorAddedEventType,
+					Reduce: p.reduceSecretGeneratorAdded,
+				},
+				{
+					Event:  iam.SecretGeneratorChangedEventType,
+					Reduce: p.reduceSecretGeneratorChanged,
+				},
+				{
+					Event:  iam.SecretGeneratorRemovedEventType,
+					Reduce: p.reduceSecretGeneratorRemoved,
+				},
+			},
+		},
+	}
+}
+
+const (
+	SecretGeneratorColumnGeneratorType       = "generator_type"
+	SecretGeneratorColumnAggregateID         = "aggregate_id"
+	SecretGeneratorColumnCreationDate        = "creation_date"
+	SecretGeneratorColumnChangeDate          = "change_date"
+	SecretGeneratorColumnResourceOwner       = "resource_owner"
+	SecretGeneratorColumnSequence            = "sequence"
+	SecretGeneratorColumnLength              = "length"
+	SecretGeneratorColumnExpiry              = "expiry"
+	SecretGeneratorColumnIncludeLowerLetters = "include_lower_letters"
+	SecretGeneratorColumnIncludeUpperLetters = "include_upper_letters"
+	SecretGeneratorColumnIncludeDigits       = "include_digits"
+	SecretGeneratorColumnIncludeSymbols      = "include_symbols"
+)
+
+func (p *SecretGeneratorProjection) reduceSecretGeneratorAdded(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.SecretGeneratorAddedEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-nf9sl", "seq", event.Sequence(), "expectedType", iam.SecretGeneratorAddedEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-sk99F", "reduce.wrong.event.type")
+	}
+	return crdb.NewCreateStatement(
+		e,
+		[]handler.Column{
+			handler.NewCol(SecretGeneratorColumnAggregateID, e.Aggregate().ID),
+			handler.NewCol(SecretGeneratorColumnGeneratorType, e.GeneratorType),
+			handler.NewCol(SecretGeneratorColumnCreationDate, e.CreationDate()),
+			handler.NewCol(SecretGeneratorColumnChangeDate, e.CreationDate()),
+			handler.NewCol(SecretGeneratorColumnResourceOwner, e.Aggregate().ResourceOwner),
+			handler.NewCol(SecretGeneratorColumnSequence, e.Sequence()),
+			handler.NewCol(SecretGeneratorColumnLength, e.Length),
+			handler.NewCol(SecretGeneratorColumnExpiry, e.Expiry),
+			handler.NewCol(SecretGeneratorColumnIncludeLowerLetters, e.IncludeLowerLetters),
+			handler.NewCol(SecretGeneratorColumnIncludeUpperLetters, e.IncludeUpperLetters),
+			handler.NewCol(SecretGeneratorColumnIncludeDigits, e.IncludeDigits),
+			handler.NewCol(SecretGeneratorColumnIncludeSymbols, e.IncludeSymbols),
+		},
+	), nil
+}
+
+func (p *SecretGeneratorProjection) reduceSecretGeneratorChanged(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.SecretGeneratorChangedEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-sn9jd", "seq", event.Sequence(), "expected", iam.SecretGeneratorChangedEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-s00Fs", "reduce.wrong.event.type")
+	}
+
+	columns := make([]handler.Column, 0, 7)
+	columns = append(columns, handler.NewCol(SecretGeneratorColumnChangeDate, e.CreationDate()),
+		handler.NewCol(SecretGeneratorColumnSequence, e.Sequence()))
+	if e.Length != nil {
+		columns = append(columns, handler.NewCol(SecretGeneratorColumnLength, *e.Length))
+	}
+	if e.Expiry != nil {
+		columns = append(columns, handler.NewCol(SecretGeneratorColumnExpiry, *e.Expiry))
+	}
+	if e.IncludeLowerLetters != nil {
+		columns = append(columns, handler.NewCol(SecretGeneratorColumnIncludeLowerLetters, *e.IncludeLowerLetters))
+	}
+	if e.IncludeUpperLetters != nil {
+		columns = append(columns, handler.NewCol(SecretGeneratorColumnIncludeUpperLetters, *e.IncludeUpperLetters))
+	}
+	if e.IncludeDigits != nil {
+		columns = append(columns, handler.NewCol(SecretGeneratorColumnIncludeDigits, *e.IncludeDigits))
+	}
+	if e.IncludeSymbols != nil {
+		columns = append(columns, handler.NewCol(SecretGeneratorColumnIncludeSymbols, *e.IncludeSymbols))
+	}
+	return crdb.NewUpdateStatement(
+		e,
+		columns,
+		[]handler.Condition{
+			handler.NewCond(SecretGeneratorColumnAggregateID, e.Aggregate().ID),
+			handler.NewCond(SecretGeneratorColumnGeneratorType, e.GeneratorType),
+		},
+	), nil
+}
+
+func (p *SecretGeneratorProjection) reduceSecretGeneratorRemoved(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.SecretGeneratorRemovedEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-30oEF", "seq", event.Sequence(), "expectedType", iam.SecretGeneratorRemovedEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-fmiIf", "reduce.wrong.event.type")
+	}
+	return crdb.NewDeleteStatement(
+		e,
+		[]handler.Condition{
+			handler.NewCond(SecretGeneratorColumnAggregateID, e.Aggregate().ID),
+			handler.NewCond(SecretGeneratorColumnGeneratorType, e.GeneratorType),
+		},
+	), nil
+}
--- a/internal/query/projection/secret_generator_test.go
+++ b/internal/query/projection/secret_generator_test.go
@@ -0,0 +1,141 @@
+package projection
+
+import (
+	"testing"
+	"time"
+
+	"github.com/caos/zitadel/internal/domain"
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/eventstore"
+	"github.com/caos/zitadel/internal/eventstore/handler"
+	"github.com/caos/zitadel/internal/eventstore/repository"
+	"github.com/caos/zitadel/internal/repository/iam"
+)
+
+func TestSecretGeneratorProjection_reduces(t *testing.T) {
+	type args struct {
+		event func(t *testing.T) eventstore.Event
+	}
+	tests := []struct {
+		name   string
+		args   args
+		reduce func(event eventstore.Event) (*handler.Statement, error)
+		want   wantReduce
+	}{
+		{
+			name: "reduceSecretGeneratorRemoved",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.SecretGeneratorRemovedEventType),
+					iam.AggregateType,
+					[]byte(`{"generatorType": 1}`),
+				), iam.SecretGeneratorRemovedEventMapper),
+			},
+			reduce: (&SecretGeneratorProjection{}).reduceSecretGeneratorRemoved,
+			want: wantReduce{
+				projection:       SecretGeneratorProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "DELETE FROM zitadel.projections.secret_generators WHERE (aggregate_id = $1) AND (generator_type = $2)",
+							expectedArgs: []interface{}{
+								"agg-id",
+								domain.SecretGeneratorTypeInitCode,
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "reduceSecretGeneratorChanged",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.SecretGeneratorChangedEventType),
+					iam.AggregateType,
+					[]byte(`{"generatorType": 1, "length": 4, "expiry": 10000000, "includeLowerLetters": true, "includeUpperLetters": true, "includeDigits": true, "includeSymbols": true}`),
+				), iam.SecretGeneratorChangedEventMapper),
+			},
+			reduce: (&SecretGeneratorProjection{}).reduceSecretGeneratorChanged,
+			want: wantReduce{
+				projection:       SecretGeneratorProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "UPDATE zitadel.projections.secret_generators SET (change_date, sequence, length, expiry, include_lower_letters, include_upper_letters, include_digits, include_symbols) = ($1, $2, $3, $4, $5, $6, $7, $8) WHERE (aggregate_id = $9) AND (generator_type = $10)",
+							expectedArgs: []interface{}{
+								anyArg{},
+								uint64(15),
+								uint(4),
+								time.Millisecond * 10,
+								true,
+								true,
+								true,
+								true,
+								"agg-id",
+								domain.SecretGeneratorTypeInitCode,
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "reduceSecretGeneratorAdded",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.SecretGeneratorAddedEventType),
+					iam.AggregateType,
+					[]byte(`{"generatorType": 1, "length": 4, "expiry": 10000000, "includeLowerLetters": true, "includeUpperLetters": true, "includeDigits": true, "includeSymbols": true}`),
+				), iam.SecretGeneratorAddedEventMapper),
+			},
+			reduce: (&SecretGeneratorProjection{}).reduceSecretGeneratorAdded,
+			want: wantReduce{
+				projection:       SecretGeneratorProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "INSERT INTO zitadel.projections.secret_generators (aggregate_id, generator_type, creation_date, change_date, resource_owner, sequence, length, expiry, include_lower_letters, include_upper_letters, include_digits, include_symbols) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)",
+							expectedArgs: []interface{}{
+								"agg-id",
+								domain.SecretGeneratorTypeInitCode,
+								anyArg{},
+								anyArg{},
+								"ro-id",
+								uint64(15),
+								uint(4),
+								time.Millisecond * 10,
+								true,
+								true,
+								true,
+								true,
+							},
+						},
+					},
+				},
+			},
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			event := baseEvent(t)
+			got, err := tt.reduce(event)
+			if _, ok := err.(errors.InvalidArgument); !ok {
+				t.Errorf("no wrong event mapping: %v, got: %v", err, got)
+			}
+
+			event = tt.args.event(t)
+			got, err = tt.reduce(event)
+			assertReduce(t, got, err, tt.want)
+		})
+	}
+}
--- a/internal/query/projection/smtp.go
+++ b/internal/query/projection/smtp.go
@@ -0,0 +1,143 @@
+package projection
+
+import (
+	"context"
+
+	"github.com/caos/logging"
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/eventstore"
+	"github.com/caos/zitadel/internal/eventstore/handler"
+	"github.com/caos/zitadel/internal/eventstore/handler/crdb"
+	"github.com/caos/zitadel/internal/repository/iam"
+	"github.com/caos/zitadel/internal/repository/project"
+)
+
+type SMTPConfigProjection struct {
+	crdb.StatementHandler
+}
+
+const (
+	SMTPConfigProjectionTable = "zitadel.projections.smtp_configs"
+)
+
+func NewSMTPConfigProjection(ctx context.Context, config crdb.StatementHandlerConfig) *SMTPConfigProjection {
+	p := &SMTPConfigProjection{}
+	config.ProjectionName = SMTPConfigProjectionTable
+	config.Reducers = p.reducers()
+	p.StatementHandler = crdb.NewStatementHandler(ctx, config)
+	return p
+}
+
+func (p *SMTPConfigProjection) reducers() []handler.AggregateReducer {
+	return []handler.AggregateReducer{
+		{
+			Aggregate: project.AggregateType,
+			EventRedusers: []handler.EventReducer{
+				{
+					Event:  iam.SMTPConfigAddedEventType,
+					Reduce: p.reduceSMTPConfigAdded,
+				},
+				{
+					Event:  iam.SMTPConfigChangedEventType,
+					Reduce: p.reduceSMTPConfigChanged,
+				},
+				{
+					Event:  iam.SMTPConfigPasswordChangedEventType,
+					Reduce: p.reduceSMTPConfigPasswordChanged,
+				},
+			},
+		},
+	}
+}
+
+const (
+	SMTPConfigColumnAggregateID   = "aggregate_id"
+	SMTPConfigColumnCreationDate  = "creation_date"
+	SMTPConfigColumnChangeDate    = "change_date"
+	SMTPConfigColumnResourceOwner = "resource_owner"
+	SMTPConfigColumnSequence      = "sequence"
+	SMTPConfigColumnTLS           = "tls"
+	SMTPConfigColumnFromAddress   = "sender_address"
+	SMTPConfigColumnFromName      = "sender_name"
+	SMTPConfigColumnSMTPHost      = "host"
+	SMTPConfigColumnSMTPUser      = "username"
+	SMTPConfigColumnSMTPPassword  = "password"
+)
+
+func (p *SMTPConfigProjection) reduceSMTPConfigAdded(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.SMTPConfigAddedEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-wkofs", "seq", event.Sequence(), "expectedType", iam.SMTPConfigAddedEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-sk99F", "reduce.wrong.event.type")
+	}
+	return crdb.NewCreateStatement(
+		e,
+		[]handler.Column{
+			handler.NewCol(SMTPConfigColumnAggregateID, e.Aggregate().ID),
+			handler.NewCol(SMTPConfigColumnCreationDate, e.CreationDate()),
+			handler.NewCol(SMTPConfigColumnChangeDate, e.CreationDate()),
+			handler.NewCol(SMTPConfigColumnResourceOwner, e.Aggregate().ResourceOwner),
+			handler.NewCol(SMTPConfigColumnSequence, e.Sequence()),
+			handler.NewCol(SMTPConfigColumnTLS, e.TLS),
+			handler.NewCol(SMTPConfigColumnFromAddress, e.SenderAddress),
+			handler.NewCol(SMTPConfigColumnFromName, e.SenderName),
+			handler.NewCol(SMTPConfigColumnSMTPHost, e.Host),
+			handler.NewCol(SMTPConfigColumnSMTPUser, e.User),
+			handler.NewCol(SMTPConfigColumnSMTPPassword, e.Password),
+		},
+	), nil
+}
+
+func (p *SMTPConfigProjection) reduceSMTPConfigChanged(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.SMTPConfigChangedEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-wo00f", "seq", event.Sequence(), "expected", iam.SMTPConfigChangedEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-wl0wd", "reduce.wrong.event.type")
+	}
+
+	columns := make([]handler.Column, 0, 7)
+	columns = append(columns, handler.NewCol(SMTPConfigColumnChangeDate, e.CreationDate()),
+		handler.NewCol(SMTPConfigColumnSequence, e.Sequence()))
+	if e.TLS != nil {
+		columns = append(columns, handler.NewCol(SMTPConfigColumnTLS, *e.TLS))
+	}
+	if e.FromAddress != nil {
+		columns = append(columns, handler.NewCol(SMTPConfigColumnFromAddress, *e.FromAddress))
+	}
+	if e.FromName != nil {
+		columns = append(columns, handler.NewCol(SMTPConfigColumnFromName, *e.FromName))
+	}
+	if e.Host != nil {
+		columns = append(columns, handler.NewCol(SMTPConfigColumnSMTPHost, *e.Host))
+	}
+	if e.User != nil {
+		columns = append(columns, handler.NewCol(SMTPConfigColumnSMTPUser, *e.User))
+	}
+	return crdb.NewUpdateStatement(
+		e,
+		columns,
+		[]handler.Condition{
+			handler.NewCond(SMTPConfigColumnAggregateID, e.Aggregate().ID),
+		},
+	), nil
+}
+
+func (p *SMTPConfigProjection) reduceSMTPConfigPasswordChanged(event eventstore.Event) (*handler.Statement, error) {
+	e, ok := event.(*iam.SMTPConfigPasswordChangedEvent)
+	if !ok {
+		logging.LogWithFields("HANDL-f92sf", "seq", event.Sequence(), "expected", iam.SMTPConfigChangedEventType).Error("wrong event type")
+		return nil, errors.ThrowInvalidArgument(nil, "HANDL-fk02f", "reduce.wrong.event.type")
+	}
+
+	return crdb.NewUpdateStatement(
+		e,
+		[]handler.Column{
+			handler.NewCol(SMTPConfigColumnChangeDate, e.CreationDate()),
+			handler.NewCol(SMTPConfigColumnSequence, e.Sequence()),
+			handler.NewCol(SMTPConfigColumnSMTPPassword, e.Password),
+		},
+		[]handler.Condition{
+			handler.NewCond(SMTPConfigColumnAggregateID, e.Aggregate().ID),
+		},
+	), nil
+}
--- a/internal/query/projection/smtp_test.go
+++ b/internal/query/projection/smtp_test.go
@@ -0,0 +1,162 @@
+package projection
+
+import (
+	"testing"
+
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/eventstore"
+	"github.com/caos/zitadel/internal/eventstore/handler"
+	"github.com/caos/zitadel/internal/eventstore/repository"
+	"github.com/caos/zitadel/internal/repository/iam"
+)
+
+func TestSMTPConfigProjection_reduces(t *testing.T) {
+	type args struct {
+		event func(t *testing.T) eventstore.Event
+	}
+	tests := []struct {
+		name   string
+		args   args
+		reduce func(event eventstore.Event) (*handler.Statement, error)
+		want   wantReduce
+	}{
+		{
+			name: "reduceSMTPConfigChanged",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.SMTPConfigChangedEventType),
+					iam.AggregateType,
+					[]byte(`{
+						"tls": true,
+						"senderAddress": "sender",
+						"senderName": "name",
+						"host": "host",
+						"user": "user"
+					}`,
+					),
+				), iam.SMTPConfigChangedEventMapper),
+			},
+			reduce: (&SMTPConfigProjection{}).reduceSMTPConfigChanged,
+			want: wantReduce{
+				projection:       SMTPConfigProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "UPDATE zitadel.projections.smtp_configs SET (change_date, sequence, tls, sender_address, sender_name, host, username) = ($1, $2, $3, $4, $5, $6, $7) WHERE (aggregate_id = $8)",
+							expectedArgs: []interface{}{
+								anyArg{},
+								uint64(15),
+								true,
+								"sender",
+								"name",
+								"host",
+								"user",
+								"agg-id",
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "reduceSMTPConfigAdded",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.SMTPConfigAddedEventType),
+					iam.AggregateType,
+					[]byte(`{
+						"tls": true,
+						"senderAddress": "sender",
+						"senderName": "name",
+						"host": "host",
+						"user": "user",
+						"password": {
+							"cryptoType": 0,
+							"algorithm": "RSA-265",
+							"keyId": "key-id"
+						}
+					}`),
+				), iam.SMTPConfigAddedEventMapper),
+			},
+			reduce: (&SMTPConfigProjection{}).reduceSMTPConfigAdded,
+			want: wantReduce{
+				projection:       SMTPConfigProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "INSERT INTO zitadel.projections.smtp_configs (aggregate_id, creation_date, change_date, resource_owner, sequence, tls, sender_address, sender_name, host, username, password) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)",
+							expectedArgs: []interface{}{
+								"agg-id",
+								anyArg{},
+								anyArg{},
+								"ro-id",
+								uint64(15),
+								true,
+								"sender",
+								"name",
+								"host",
+								"user",
+								anyArg{},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "reduceSMTPConfigPasswordChanged",
+			args: args{
+				event: getEvent(testEvent(
+					repository.EventType(iam.SMTPConfigPasswordChangedEventType),
+					iam.AggregateType,
+					[]byte(`{
+						"password": {
+							"cryptoType": 0,
+							"algorithm": "RSA-265",
+							"keyId": "key-id"
+						}
+					}`),
+				), iam.SMTPConfigPasswordChangedEventMapper),
+			},
+			reduce: (&SMTPConfigProjection{}).reduceSMTPConfigPasswordChanged,
+			want: wantReduce{
+				projection:       SMTPConfigProjectionTable,
+				aggregateType:    eventstore.AggregateType("iam"),
+				sequence:         15,
+				previousSequence: 10,
+				executer: &testExecuter{
+					executions: []execution{
+						{
+							expectedStmt: "UPDATE zitadel.projections.smtp_configs SET (change_date, sequence, password) = ($1, $2, $3) WHERE (aggregate_id = $4)",
+							expectedArgs: []interface{}{
+								anyArg{},
+								uint64(15),
+								anyArg{},
+								"agg-id",
+							},
+						},
+					},
+				},
+			},
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			event := baseEvent(t)
+			got, err := tt.reduce(event)
+			if _, ok := err.(errors.InvalidArgument); !ok {
+				t.Errorf("no wrong event mapping: %v, got: %v", err, got)
+			}
+
+			event = tt.args.event(t)
+			got, err = tt.reduce(event)
+			assertReduce(t, got, err, tt.want)
+		})
+	}
+}